cybersecdirectory

MDR providers in the United States

60 of the 100 MDR providers we list are based in the United States. 6 are public, 11 are owned by another company and 43 are private. The oldest, REJIS, was founded in 1974. By revenue from annual reports, the largest company here is Microsoft ($331.8bn in FY2026).

Companies focused on managed detection and response in the United States

15 companies
CompanyBased inFoundedSizeOwnershipRevenue
LevelBlue (formerly Trustwave)

Managed security provider that now runs Trustwave's SpiderLabs penetration testing team, with CREST-accredited testing, red and purple teaming, and deep PCI DSS expertise.

Chicago, United States1995500+ staffPrivate
DeepSeas (formerly RedTeam Security)

RedTeam Security is now part of DeepSeas, which offers penetration testing, red teaming and physical testing as its offensive security practice.

Atlanta, United States201211-50 staffPrivate
Arctic Wolf

Arctic Wolf provides managed security operations, threat detection and incident response services to organisations.

Eden Prairie, United States2012Private
Armor

Provides cloud security, compliance and managed detection and response services to regulated industries.

Plano, United States2009Private
Binary Defense

Binary Defense provides managed detection and response services and an AI-powered security platform.

Stow, United StatesPrivate
Critical Start

Critical Start provides managed detection and response services to monitor, investigate, and resolve security threats for organisations.

Plano, United States2012Owned by Vista Equity Partners
Cyderes

Cyderes provides managed cybersecurity services including identity, threat detection, and exposure management.

Kansas City, United StatesPrivate
Expel

Expel provides managed detection and response security services using AI and human analysts.

Herndon, United States2016Private
Foresite Cybersecurity

Foresite provides managed detection and response services using agentic AI for security operations.

Overland Park, United StatesPrivate
Huntress

Huntress provides managed cybersecurity services including endpoint detection, identity threat detection, and security awareness training.

Columbia, United StatesPrivate
Kaseya

Kaseya provides software for IT management, security and automation to IT teams and managed service providers.

Miami, United States2000Private
Ontinue

Ontinue provides managed detection and response services for Microsoft security customers.

Redwood City, United StatesOwned by Quorum Cyber
Quzara

Quzara provides FedRAMP compliance advisory and managed detection and response services.

Vienna, United StatesPrivate
UnderDefense

UnderDefense provides managed detection and response, incident response, and compliance automation services.

New York, United States2017Private
Red Canary

Zscaler provides cloud-based security, network and transformation services for enterprises.

Santa Clara, United States2014Part of Zscaler

Also active in managed detection and response

45 companies
CompanyBased inFoundedSizeOwnershipRevenue
Microsoft

Microsoft sells software, cloud services, hardware, and gaming products.

Redmond, United States1975228,000 staffPublic, MSFT$331.8bn (FY2026)
Palo Alto Networks

Palo Alto Networks provides cybersecurity platforms and services to protect organizations from cyber threats.

Santa Clara, United States200513,900 staffPublic, PANW$11.5bn (FY2026)
CrowdStrike

CrowdStrike provides AI-native cybersecurity solutions to stop breaches.

Austin, United States20117,925 staffPublic, CRWD$4.8bn (FY2026)
SentinelOne

SentinelOne provides an AI-native cybersecurity platform for endpoint, identity, and cloud protection.

Mountain View, United States2013Public, S$1.0bn (FY2026)
Rapid7

Rapid7 provides AI-powered managed cybersecurity operations, including MDR, SIEM, and vulnerability management.

Boston, United States2000500+ staffPublic, RPD$859.8m (FY2025)
Varonis

Varonis provides data security software that protects data across cloud, SaaS and on-premises environments.

Miami, United States2005Public, VRNS$623.5m (FY2025)
ThreatLocker

Provides Zero Trust cybersecurity software controlling application execution, network access and privileged access for organisations.

Orlando, United States2017700 staffPrivate
Sophos

Sophos provides cybersecurity products and managed detection and response services to organisations worldwide.

Atlanta, United States1999500+ staffOwned by Thoma Bravo
Redpoint Cybersecurity

US-wide pen testing firm serving major cities including Atlanta, Dallas, Denver, Houston, and Miami with security assessments.

Denver, United States201511-50 staffPrivate
7AI

7AI provides AI agents that automate security operations centre tasks for enterprises.

Boston, United States2024Private
Alcott Enterprises Managed IT Services & Cybersecurity

Alcott Enterprises is a managed IT service provider and cybersecurity company based in Los Angeles.

Torrance, United States2014Private
Artemis Security

Artemis Security provides an AI-native security operations platform that detects, investigates and responds to cyber attacks.

New York, United StatesPrivate
Barracuda Networks

Barracuda Networks provides cybersecurity solutions for email, networks, applications, and data.

Campbell, United States2003Owned by KKR
Blumira

Blumira provides a security operations platform for IT teams to detect and respond to threats.

Ann Arbor, United StatesPrivate
Boston Managed IT

Boston Managed IT is a managed service provider based in Waltham, Massachusetts, founded in 2017.

Waltham, United States2015Private
Cofense

Cofense provides phishing detection and response services using AI and human validation.

Arlington, United StatesPrivate
Comodo Group

Comodo Group sells cybersecurity products and services to businesses and organisations.

Clifton, United States1998Private
CyberSheath

CyberSheath provides cybersecurity compliance services for DOD contractors, focusing on CMMC, DFARS, and NIST standards.

Reston, United States2012Private
Datto

Datto provides backup and disaster recovery, endpoint management, professional services automation, networking and cybersecurity solutions.

Norwalk, United States2007Part of Kaseya
Dragos

Dragos provides cybersecurity for industrial control systems and operational technology environments.

Houston, United States2016Part of Accenture
Dropzone AI

Dropzone AI builds AI agents that investigate security alerts and hunt threats for security teams.

Seattle, United States2022Private
Druva

Druva provides a fully managed SaaS platform for data backup, recovery, and cyber resilience.

Sunnyvale, United States2008Private
Exaforce

Exaforce provides an agentic AI platform for security operations, detection, triage, investigation and response.

San Jose, United States2023Private
Fleet Defender

Hardware and software that detect cyber attacks and cargo theft on fleet vehicles, backed by a vehicle SOC.

Omaha, United StatesPrivate
Globalgig

Globalgig provides managed security and network services to enterprises across multiple countries.

San Antonio, United StatesPrivate
Intezer

Intezer provides an AI-powered security operations center that investigates all alerts at forensic depth.

New York, United States2015Private
Lorikeet Security

Lorikeet Security provides penetration testing, incident response, and security leadership services.

Kissimmee, United States2021Private
MonsterCloud

MonsterCloud provides managed cloud, IT and cyber security services, including ransomware recovery, to businesses across the United States.

Hollywood, United StatesPrivate
Netrio

Netrio provides managed IT, cybersecurity, cloud, and connectivity services to mid-market enterprises.

McKinney, United StatesPrivate
NINJIO

NINJIO provides cybersecurity awareness training and human risk management through personalised coaching and phishing simulations.

Westlake Village, United StatesPrivate
nuHarbor

nuHarbor provides cybersecurity services and managed security operations to organisations across government, healthcare, finance and enterprise.

United States2013Private
REJIS

REJIS provides technology solutions for public safety and government agencies.

St. Louis, United States1974Private
ReliaQuest

ReliaQuest provides an AI security operations platform for enterprises to detect and respond to threats.

Tampa, United StatesPrivate
SCYTHE

SCYTHE provides a platform for continuous adversarial exposure validation across IT, cloud, and OT environments.

Columbia, United States2018Private
Securonix

Securonix provides a cloud-native platform for security operations, combining SIEM, UEBA, SOAR and threat intelligence.

San Mateo, United States2008Private
SonicWall

SonicWall provides unified cybersecurity for SMBs, MSPs, and IT teams.

Milpitas, United States1991Owned by Francisco Partners and Elliott Investment Management
STACK Cybersecurity

Provides managed IT services, cybersecurity, compliance support and AI adoption guidance to businesses.

Livonia, United StatesOwned by IT Solutions
Tranzhalo

Georgia start-up whose TranzSecure service flags cyber attacks, unknown devices and cargo theft across trucking fleets.

Alpharetta, United StatesPrivate
Vectra AI

Vectra AI provides AI-native security and observability to detect and respond to cyber threats.

San Jose, United States2011Private
WatchGuard

WatchGuard provides unified cybersecurity solutions for networks, endpoints, identities, and cloud environments.

Seattle, United States1996Owned by Vector Capital
XTIUM

Provides managed IT services including security, cloud desktops, networks and AI deployment support.

Oldsmar, United StatesPrivate
Athena Agentic

Athena Agentic provides a unified cyber operations platform that automates detection, response, and hardening.

Dallas, United StatesPrivate
Cantina

Cantina provides an agentic security platform that uses autonomous AI agents to detect, respond to, and fix security issues.

Miami, United StatesPrivate
Kyndryl

Managed security operations, threat intelligence and incident response services delivered from global security operations centres by an IT infrastructure services provider.

New York, United StatesPrivate
Mandiant

Mandiant provides threat intelligence and incident response, now sold as Google Threat Intelligence alongside VirusTotal within Google Cloud.

United States2004Part of Google

More MDR providers

All 100 MDR providers

Every cybersecurity company in the United States · See every category